PanicStation.org
UK USA
us Money & financial emergencies

What to do if…
your card details are compromised and you keep seeing small test charges

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Lock the card now, then contact the card issuer using a trusted number or the official app to replace the card and report every charge you do not recognize.

Do not do these things

  • Don’t ignore small charges; they can be a test before larger fraud.
  • Don’t assume an unknown merchant is only a harmless verification hold until your issuer confirms it.
  • Don’t click links or call numbers from unexpected fraud-alert texts or emails.
  • Don’t share one-time passcodes, PINs, card security codes, or online banking passwords.
  • Don’t move money because a caller says it will “protect” your account.

What to do now

  1. Lock or freeze the card and stop using it.
    Use the issuer’s official app or website if you can do this quickly.

  2. Contact the issuer’s fraud department using a trusted route.
    Use the number on the back of the card, the official app, or the issuer’s official website. Say: “My card details appear to be compromised and I’m seeing repeated small charges I don’t recognize.” Ask them to:

    • cancel or close the compromised card and issue a replacement with a new number
    • tell you which items are pending authorizations and which are completed charges
    • block the suspicious merchant if they can
    • explain exactly how they want you to dispute each charge

  3. Ask about digital wallets and saved-card versions.
    Ask whether the card has been added to any digital wallet or device you do not recognize. Ask the issuer to remove unknown wallet access and revoke wallet tokens where possible.

  4. Dispute every charge you do not recognize, and keep a written trail.
    Report the charges right away by the issuer’s app, phone line, or website. Ask how to send written confirmation or a dispute letter, and keep copies, screenshots, dates, times, confirmation numbers, and the names or IDs of people you speak with.

  5. If it is a credit card, protect the written dispute deadline.
    For a credit card billing error, send a written dispute so it reaches the issuer within 60 days after the first statement showing the disputed charge was sent to you. Use the billing-inquiries address, not the payment address, unless the issuer tells you otherwise in writing.

  6. If it is a debit card or the money came from checking, report it as soon as possible.
    Debit-card and electronic-transfer protections can depend on how quickly you notify the bank. Report now, ask what written notice they need, and make sure the bank is notified no later than 60 days after the statement showing the unauthorized transfer was sent.

  7. If the descriptor looks recurring, say that clearly.
    Tell the issuer: “These are unauthorized recurring charges. Please block this merchant and tell me what happens if they try again.” Ask whether a replacement card number is enough to stop future attempts.

  8. Check the most likely access points after the issuer has acted.
    Check your email and issuer alerts for messages such as “card added,” “new device,” or “payment method updated.” Change the password on your email account and any shopping, delivery, travel, or subscription account showing unknown activity, and turn on multi-factor authentication where available.

  9. If there are signs beyond this card, start identity-theft steps.
    If you see new accounts, credit inquiries, missing mail, unfamiliar debt, or other personal information misuse, use IdentityTheft.gov and consider a fraud alert or credit freeze.

What can wait

  • Updating legitimate subscriptions with the new card number can wait until the compromised card is closed and disputes are underway.
  • You do not need to find every place you have ever used the card before calling the issuer.
  • You do not need to choose a credit-monitoring service right now.
  • Extra reports can usually wait unless you see signs of broader identity theft.

Important reassurance

Small unknown charges are alarming, but this is a situation card issuers handle every day. Locking the card, reporting quickly, and keeping records gives you a clear next step instead of trying to solve everything at once.

Scope note

These are first steps to stop more charges and begin disputes. If the problem spreads beyond this card, later decisions may need help from your card issuer, bank, credit bureaus, identity-theft resources, or another qualified specialist.

Important note

This is general information for urgent first steps, not legal, financial, identity-theft, or professional advice. Issuer procedures and protections can vary, especially between credit cards and debit cards, so follow your issuer’s instructions and keep records of what you report.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us